CoreCVE
Back

CRITICAL

Improper neutralization of SQL parameter in Theme Volty CMS Payment Icon module for PrestaShop

Published Oct 3, 2023

Description

Improper neutralization of SQL parameter in Theme Volty CMS Payment Icon module for PrestaShop. In the module “Theme Volty CMS Payment Icon” (tvcmspaymenticon) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Oct 3, 2023
Updated Sep 25, 2024
Reserved Aug 7, 2023
Link CVE-2023-39645
CISA Vulnrichment
Updated Sep 20, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2023-39645
Red Hat
Severity n/a
Public date n/a
Links CVE-2023-39645
ENISA EUVD
Assigner n/a
Published n/a
Updated n/a
Exploited since n/a
Link n/a